chore: Bump payload vulnerability (#42609)

This PR
- reverts changes made in
https://github.com/supabase/supabase/pull/42568 and
https://github.com/supabase/supabase/pull/42570 because they had some
unneeded changes (`@types/node` bumped to v25+, for example)
- bumps only the vulnerable dependency (which is in `cms` app and it's
not currently used).

<!-- This is an auto-generated comment: release notes by coderabbit.ai
-->

## Summary by CodeRabbit

* **Chores**
  * Adjusted CMS dependencies to earlier versions
  * Optimized documentation API code organization and type handling

<!-- end of auto-generated comment: release notes by coderabbit.ai -->
This commit is contained in:
Ivan Vasilov
2026-02-09 15:26:47 +01:00
committed by GitHub
parent 0b0bece3ea
commit e41a3f4fb3
3 changed files with 342 additions and 1215 deletions

View File

@@ -20,9 +20,9 @@
"typecheck": "tsc --noEmit"
},
"dependencies": {
"@payloadcms/admin-bar": "^3.74.0",
"@payloadcms/db-postgres": "^3.74.0",
"@payloadcms/live-preview-react": "^3.74.0",
"@payloadcms/admin-bar": "^3.52.0",
"@payloadcms/db-postgres": "^3.73.0",
"@payloadcms/live-preview-react": "^3.52.0",
"@payloadcms/next": "3.52.0",
"@payloadcms/payload-cloud": "3.60.0",
"@payloadcms/plugin-form-builder": "3.52.0",

View File

@@ -1,9 +1,10 @@
import { SupabaseClient } from '@supabase/supabase-js'
import { ApplicationError, clippy, UserError } from 'ai-commands/edge'
import { isFeatureEnabled } from 'common/enabled-features'
import { ApplicationError, UserError, clippy } from 'ai-commands/edge'
import { NextRequest, NextResponse } from 'next/server'
import OpenAI from 'openai'
import { isFeatureEnabled } from 'common/enabled-features'
export const runtime = 'edge'
/* To avoid OpenAI errors, restrict to the Vercel Edge Function regions that
overlap with the OpenAI API regions.
@@ -56,8 +57,7 @@ export async function POST(req: NextRequest) {
}
const useAltSearchIndex = !isFeatureEnabled('search:fullIndex')
// @ts-ignore: We have 6 version of openai and the types are not compatible with each other, we need to consolidate to one
const response = await clippy(openai as any, supabaseClient, messages, {
const response = await clippy(openai, supabaseClient, messages, {
useAltSearchIndex,
})

1543
pnpm-lock.yaml generated

File diff suppressed because it is too large Load Diff